Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1504445-1)
SAP Support Packages
(SAPK-51018INSCMBASIS, SAPK-70009INSCMBASIS, SAPK-70102INSCMBASIS)
Описание
The RCCF fails to correctly validate the path a user-submitted file is written to. This means that an attacker can potentially overwrite data on the remote system.
Как исправить
Correct the source code by implementing the attached correction instructions for SCM Basis as of Release 5.1.
Ссылки
